[felixge]

Thank you so much, this is very helpful and interesting. I'll try to experiment with this at some point.

[fweimer]

Glad to be of help.

Note that it's actually GLIBC_TUNABLES=glibc.cpu.hwcaps=SHSTK to enable it with Fedora 40 glibc (and the program needs to be built with -fcf-protection).